Method and system for displaying integrated log information

ABSTRACT

The present invention provides a method for collecting only log information relating to specific processing from among a plurality of pieces of log information for integration.  
     According to the present invention, session information, which is given every time log information is processed and included in the log information held by a server, is recorded in a session-information management table. In addition, how session information associates with others among different pieces of log information is recorded in a session-information association table. Recursively searching the session-information association table by use of session information specified by a user through a target log entry input unit enables identification of a set of session information relating to the processing to which the user pays attention. Information corresponding to each of the session information related is collected from log information, and is integrated according to the recorded date and time of a log. Then, the integrated information is arranged in a form that assists the user in easily understanding a process flow before the information is presented to the user.

BACKGROUND OF THE INVENTION

[0001] The present invention relates to a system, composed of aplurality of computers connected via a network, for integrating piecesof log information, each piece of which is independently held by each ofthe plurality of computers.

[0002] At present, a system that provides a user with services such ason-line shopping on the Internet is coming into widespread use. Using amechanism of WWW (World Wide Web) of the system, the user can receivethe services by accessing a Web server which is a computer providing theservices through a general-purpose browser used for the WWW.

[0003] At an early stage, contents of the services mainly include basicand simple services of information providing type such as informationretrieval services. Today, more complicated services are being provided,including online shopping services for selling and purchasingcommodities and services accompanied by actual movement of money, andonline banking services that enable a user to do business with a bank.

[0004] The system on the server side providing the servicesconventionally has only the Web server. However, for the purpose ofproviding users with such complicated services, not only the Web serverbut also several kinds of servers are placed in the system on a functionbasis. One system as a general example is constituted of three kinds ofservers as follows: a Web server for generating information to be givento a user; an application server for controlling actual flows ofoperations; and a database server for storing operations data such asstock information and account information.

[0005] In addition, since the Internet basis services provided to usersare designed to be freely utilized at any time a user wants to, accessesfrom many users are sometimes concentrated. Therefore, it is necessaryto make a design that provides a system on the server side withsufficient performance. Such a case generally takes a configuration inwhich a plurality of servers of similar kind are connected to achieve anincrease in performance, instead of using one server.

[0006] As described above, a today's Web system includes two or morekinds of servers having different functions, wherein there are aplurality of servers belonging to each kind. If such a systemconfiguration is used, a set of history information about processing ofa certain user is dispersively stored in a plurality of pieces of loginformation, each piece of which is independently output as a file byeach server.

[0007] Such systems for managing system operation include, as a functionof supporting an administrator, a function whereby log information whichthe administrator wants to obtain is obtained through simple operationusing an integration management consol that displays systemconfigurations on the server side in a list format, and thereby the loginformation is presented.

[0008] In the prior art, Japanese Patent Laid-open No. 2001-356939proposes a method for facilitating the analysis of log information. Inthe method, various kinds of log information are converted into anintermediate format, are subsequently sorted and merged in order oftime, and then statistical information such as the frequency ofappearance of a keyword in the log information is provided to theadministrator at a time.

[0009] The conventional methods described above have the followingproblems. To be more specific, one piece of log information which canusually be viewed by the administrator at a time includes only a part ofhistory information on a processing flow which the administrator reallywants to view. In other words, in order to enable the administrator tokeep track of the total processing, the following work is required:obtaining all log information which is output by all related servers;collecting information considered to be related to from among the alllog information; and estimating a process flow. However, in thecomplicated system such as the today's Web system, the work isconsidered to be practically impossible.

[0010] Moreover, if the method that uses the frequency of appearance ofa keyword described in the prior art is applied, the log informationintegrated in order of time is mixed with log information that has beenaccidentally recorded at the same time, with the result that the mixedlog information is presented to the administrator. Accordingly, it isnot possible to obtain only processing history information that theadministrator really needs. For example, if a plurality of users utilizea Web server simultaneously, log information as a result of an access byeach user is successively recorded in a log file simply in order oftime. Therefore, the log information made by the two users cannot beseparated by use of the order of time. To be more specific, althoughreferring to all log information is required to enable the administratorto keep track of system operation, it is not possible to track a processflow by a simple merge and a sort in order of time.

SUMMARY OF THE INVENTION

[0011] It is therefore an object of the present invention is to providea system for collecting pieces of information needed for anadministrator from pieces of log information retained by two or morekinds of and a plurality of servers that constitute a complicated systemsuch as a Web system.

[0012] An Integrated log displaying method according to the presentinvention is based on the assumption that the method is utilized in asystem comprising a plurality of servers connected to each other via anetwork. Each server constituting the system holds log information as ahistory of processing in its own server. When a plurality of processingis executed, information used to identify each processing (hereinafterreferred to as session information) is recorded in this log information.In addition, in log information of a server existing as a middle layerof the processing, the association of session information, which iseffective in own server, with session information, which is effective inanother server where the next processing is performed, is recorded.

[0013] According to the present invention, session information includedin log information held by each server is recorded in asession-information management table. Further, the association betweenthose session information is collected from the log information, andrecorded in the session-information association table.

[0014] In the Integrated log file method according to the presentinvention, a part of log information relating to processing to which auser pays attention is specified from among the log information.Searching the session-information association table for sessioninformation corresponding to the specified part enables retrieval ofother session information (hereinafter referred to as related sessioninformation) relating to the session information. Regarding each of theretrieved related session information as an appropriate sessioninformation, the session-information association table is searchedagain, and as a result, related session information is obtained. Doingthis search recursively enables identification of a set of sessioninformation relating to the processing to which the user pays attention.

[0015] Next, log information corresponding to the session information iscollected for each of session information related, and then thosecollected log information is integrated according to the recorded dateand time of the log. The Integrated log information is log informationrelating to the processing to which the user paid attention, and istherefore arranged in a form that assists the user in easilyunderstanding a process flow before the information is presented to theuser.

BRIEF DESCRIPTION OF THE DRAWINGS

[0016]FIG. 1 is a diagram illustrating a total configuration including aWeb client, a Web server, and an integrated log display server accordingto an embodiment of the present invention;

[0017]FIG. 2 is a diagram illustrating record formats of loginformation, and integrated log information, as an example;

[0018]FIG. 3 is a block diagram illustrating the relationship among aWeb server, an AP server, a DB server, and an integrated log displayserver in a first embodiment;

[0019]FIG. 4 is a diagram illustrating a configuration of alog-configuration definition table;

[0020]FIG. 5 is a diagram illustrating a configuration of asession-information management table;

[0021]FIG. 6 is a flowchart illustrating a process flow in which a tablerelating to session information is created in the first embodiment;

[0022]FIG. 7 is a diagram illustrating a configuration of asession-information association table;

[0023]FIG. 8 is a flowchart illustrating a process flow in whichintegrated log information is created in the first embodiment;

[0024]FIG. 9 is a block diagram illustrating components in an integratedlog display server according to a second embodiment;

[0025]FIG. 10 is a diagram illustrating an example of log informationaccording to a third embodiment;

[0026]FIG. 11 is a diagram illustrating a configuration of asession-information association table;

[0027]FIG. 12 is a flowchart illustrating a process flow in which atable relating to session information is created in the thirdembodiment;

[0028]FIG. 13 is a flowchart illustrating a total process flow accordingto the first embodiment; and

[0029]FIG. 14 is a diagram illustrating an example of an input screen ofa target log entry input unit.

DESCRIPTION OF THE PREFERRED EMBODIMENT:

[0030] First Embodiment

[0031] A first embodiment of the present invention will be described indetail with reference to drawings below. FIG. 1 is a diagramillustrating a total configuration of one embodiment according to thepresent invention. In this embodiment, a system that provides a user whoutilizes a Web client 101 with services such as on-line shopping via theInternet 102 will be described. The system on the server side, whichprovides services, has a configuration in which a plurality of servers,each of which is in general a computer having a function different fromthe other, are connected to a network 103.

[0032] In the embodiment shown in FIG. 1, the system provides servicesby use of three kinds of servers as follows: a Web server 105 having afunction of generating data that is displayed on a screen of the Webclient 101; an application server 106 having a function of controllingoperation of the provided services (hereinafter referred to as “APserver”); and a database server 107 having a function of holding datarequired for the services (hereinafter referred to as “DB server”).

[0033] In a series of execution steps realized by the functions of theseservers, the Web server 105 receives an execution request from the Webclient 101, and then transmits contents of the execution request to theAP server 106. The AP server 106 extracts data required for theexecution from the DB server 107, and executes the services. After that,if it is necessary to change data in the DB server 107, the AP server106 updates the data, and then transmits the result of the execution tothe Web server 105. The Web server 105 converts the result of theexecution into a HTML (Hyper Text Markup Language) format that can beinterpreted by the Web client 101, and then sends it back to the Webclient 101. This structure on the server side is designated as“three-layer structure”. The shares of the execution and the flow of theexecution are determined among these three kinds of servers. In thiscase, each server is compared to one layer.

[0034] The servers respectively hold log information 108, 109, 110, eachof which independently has history information on operation in its ownserver. The log information held in each server is usually saved in atext file format. It is so devised that contents of the log informationcan be referred to from an integrated log display server 104 via thenetwork 103. In this embodiment, three kinds of servers, that is to say,the Web server 105, the AP server 106, and the DB server 107, constitutethe system. However, this embodiment can also be applied to a systemthat includes only part of these servers, and a system that includes aserver having log information and other functions.

[0035]FIG. 1 illustrates a detailed configuration of the integrated logdisplay server 104, and the relationship between the Integrated logdisplay server 104 and a server 208 that holds log information 209. Theserver 208 in FIG. 1 is a common expression of a server having loginformation 209. Each of the Web server 105, the AP server 106, and theDB server 107 is a kind of the server 208.

[0036] A general format of the log information 209 is shown in the upperleft of FIG. 2 by taking the log information 108 of the Web server 105as an example. Since the log information 209 is recorded as a history ofthe processing performed in the server 208, a log entry 301, which is aunit of recording, is added to the log information 209 in order of timerecorded.

[0037] In addition, in the log entry 301, log recorded time information303 indicating the date and time at which the log entry 301 is recorded,and session information 302 indicating which unit of processing in thelog information 209 the log entry 301 relates to, are output. Forexample, in the Web server 105, a cookie, which is an identifier used toidentify each Web client 101 that has accessed the Web server 105, isequivalent to the session information 302.

[0038] A log format of the log information 109 in the AP server 106 isshown as another format of log information in the upper right of FIG. 2.Although this log format is basically the same as that of the Web server105, specific session information 302 that is different from the sessioninformation 302 of the Web server 105 is given to the sessioninformation 302 in the log information 109.

[0039] In addition, because the AP server 106 is located in the middlelayer of the three-layer structure, not only the session information 302in own log information 109 but also session information 302 in the Webserver 105 and the DB server 107, which are other layers, is recorded inthe log information 109 as related session information 401. “Cookie 1”and “TranID 1” in the log information 109 are equivalent to the relatedsession information 401. It is possible to judge the association of thesession information 302 in different layers, for example, the Web server105 and the AP server 106 by associating this related sessioninformation 401 with the session information 302.

[0040] A log format of the log information 110 in the DB server 107 isshown as another format of log information in the lower left of FIG. 2.Although this log format is basically the same as that of the Web server105, the session information 302 in the log information 110 is given inunits of processing that is called transaction in the DB server 107.

[0041] Next, a configuration in the integrated log display server 104shown in FIG. 1 will be described. All information about log information209 that is managed in the integrated log display server 104 is definedin a log configuration definition table 204.

[0042] A log information collection unit 201 selectively collects loginformation that matches a condition specified by the log information209 in the server 208. A session-information extraction unit 202extracts session information 302 and session related information 402from the log information collected by the log information collectionunit 201 to create a session-information management table 205 and asession-information association table 206. A log information integratingunit 203 integrates the log information collected by the log informationcollection unit 201 into a form that assists a user in easilyunderstanding the log information, and thereby generates Integrated loginformation 207. A target log entry input unit 210 is used by a user ofthe present invention to specify a target that the user wants to obtainas integrated log information 207.

[0043] At present, in order to give scalability to the redundancy of thesystem and the performance of the total system, each layer of a generalWeb system includes a plurality of servers that function in a similarmanner. FIG. 3 is a diagram illustrating a configuration of a systemcomprising three Web servers (Web server A601, Web server B603, Webserver C605), two AP servers (AP server A607, AP server B609), and oneDB server 611.

[0044] A total process flow of this embodiment will be described withreference to a flowchart shown in FIG. 13. To begin with, definitioninformation about all log information 209 included in this systemconfiguration is defined in the log-configuration definition table 204(step 1701). FIG. 4 illustrates details of the log-configurationdefinition table 204. In the log-configuration definition table 204, arow corresponds to a piece of log information 209. A layer ID representsa layer in which a server is located. A layer ID 1 denotes a layer inwhich the Web server is located; a layer ID 2 denotes a layer in whichthe AP server is located; and a layer ID 3 denotes a layer in which theDB server is located. A log information ID is an identifier that isgiven to uniquely identify each log. A server name is an identifier usedto uniquely identify a server 208 where log information 209 exists. Theserver name uses a name of the server 208 on a network.

[0045] A log file name represents a name of a file in which loginformation 209 is recorded. A log format represents a format in whichlog information 209 is recorded. In this embodiment, Web represents arecord format of the log information 108 shown in FIG. 2. In a similarmanner, AP represents a record format of the log information 109, and DBrepresents a record format of the log information 110. A related sessionflag is a flag indicating whether or not related session information 401is included in the log information 209. If a value is 1, it shows thatthe log information 209 includes the related session information 401.

[0046] On the basis of information about the log-configurationdefinition table 204, the log information collection unit 201 collects,from log information 209 corresponding to a specified log informationID, only log entries 301 that match conditions such as rangespecifications of the log recorded time information 303, andspecifications of the session information 302.

[0047] Next, on the basis of definition information defined in thelog-configuration definition table 204, the session-informationextraction unit 202 creates the session-information management table 205and the session-information association table 206 (step 1702). Detailsof this operation will be described with reference to a flowchart shownin FIG. 6. The session-information extraction unit 202 selects a pieceof definition information about the log information 209 defined in thelog-configuration definition table 204, and then collects the loginformation 209 included in the server 208 through the log informationcollection unit 201 (step 901).

[0048] One log entry 301 is extracted from the collected log information209 (step 902) to judge whether or not session information 302 isincluded in the extracted log entry 301 (step 903). If the sessioninformation 302 is included, the session information 302, and a loginformation ID of the log information 209 that is now being scanned, areadded to the session-information management table 205 shown in FIG. 5(step 904).

[0049] If the related session flag of the log information 209 that isnow being scanned is 1, a judgment is made as to whether or not the logentry 301 includes related session information 401 (step 905). If therelated session information 401 is included, the session information302, a log information ID of the log information 209 that is now beingscanned, and the related session information 401, are added to thesession-information association table 206 shown in FIG. 7 (step 906).

[0050] If an unprocessed log entry 301 exists in the log information209, the processing after step 902 is repeated (step 907). After theprocessing of a piece of log information 209 ends, if all of the loginformation 209 defined in the log-configuration definition table 204 isnot processed yet, the processing after step 901 is repeated (step 908).As a result of the processing described above, it is possible to collectinformation about the session information 302 and the related sessioninformation 401 that are included in all of the log information 209.

[0051] After the processing of step 1702 ends, the user specifies a loginformation ID and session information 302 using the target log entryinput unit 210 (step 1703).

[0052]FIG. 14 illustrates an example of an input screen in the targetlog entry input unit 210. In the server-name selection box 1801, allserver names defined in the log-configuration definition table 204 aredisplayed, which enables selection of one server name from among thedisplayed server names.

[0053] As a result of the selection from the server-name selection box1801, log file names held by the server 208 corresponding to theselected server name is retrieved from a log definition table 204, andthereby all retrieved log file names are displayed in a log file nameselection box 1802. After the log file name is selected in the log filename selection box 1802, the date and time of log information to bedisplayed is inputted into a date and time input box 1803, and thenpressing log display information button 1804 is depressed. This causeslog information 209 that matches the conditions to be displayed in a loginformation display area 1805.

[0054] The user can specify a log information ID and session information302 by selecting one log entry 301 in this log information display area1805. In addition, instead of using the log information display area1805, directly inputting a value of the session information 302 into thesession information input box 1806 also enables specification of a loginformation ID and session information 302 in like manner.

[0055] Next, depressing an integrated log display button 1807 createsintegrated log information 207 relating to the specified sessioninformation 302 (step 1704). Details of the processing in the step 1704will be described with reference to a flowchart in FIG. 8 below.

[0056] Related session information 401 is obtained by searching thesession-information association table 206 using the specified loginformation ID and the session information 302 as search conditions.Moreover, further related session information 401 is obtained bysearching the session-information association table 206 using thisrelated session information 401 as a new search condition. If thissearch is done recursively, the user can obtain a set of related sessioninformation 401 relating to the session information 301 specified by thetarget log entry input unit 210 (step 1102).

[0057] From the session-information management table 205, a loginformation ID is obtained for each piece of the related sessioninformation 401 that has been obtained in step 1102 (step 1103). Then,the log information ID obtained in step 1103 and the related sessioninformation 401 are specified as collection conditions in the loginformation collection unit 201 to obtain log information (step 1104).In the description below, log information that matches this collectioncondition is designated as partial log information so as to distinguishthis log information from unprocessed log information 209 in the server208.

[0058] The plurality of partial log information collected in the step1104 are integrated by the log information integrating unit 203 in orderof log recorded time information 303 in the log entry, and therebyIntegrated log information 207 is created (step 1105). The Integratedlog information 207 created is output to an integrated log display textarea 1808 (step 1705).

[0059] An example of the integrated log information 207 is illustratedin the lower right of FIG. 2. The example of the Integrated loginformation 207 in FIG. 2 is Integrated log information 207 obtainedwhen specifying Session 1 as session information 302 in the target logentry input unit 210 in relation to log information (108, 109, 110)shown in FIG. 2. Judging from FIG. 7, the related session information401 relating to Session 1 as session information 302 is constituted ofthree pieces of session information, that is, Cookie 1, TranID 1, andTranID 2. Accordingly, log information corresponding to the sessioninformation is collected from each piece of the log information (108,109, 110), and the collected log information is integrated as a piece oflog information, which is Integrated log information 207 shown in FIG.2.

[0060] In this embodiment, when integrating partial log information, anindent is made by inserting blank characters, the number of whichcorresponds to a size of a layer ID, after the log recorded timeinformation 303 according to a layer ID defined in the log-configurationdefinition table so that the user can easily identify a layer, loginformation 209 of which includes the log entry 301. As a result,integrated log information 207 is created. In other words, as shown inthe integrated log information 207 in FIG. 2, as compared with the logentry 301 of the Web server 105 (layer ID 2), a part after the logrecorded time information 303 for the log entry 301 of the AP server 106(layer ID 1) is shifted to the right side.

[0061] In this embodiment, log information is integrated by use of theabove-mentioned indent. However, this embodiment can also be applied toother methods. For example, this method can also be applied to a methodin which a color in the integrated log information 207 is changedaccording to the difference in layer ID.

[0062] As described above, using the system to which the integrated logdisplaying method described in this embodiment is applied thus enablescombination of log information 209, which is individually held by eachof the plurality of servers 208, into the Integrated log information207, and also makes it possible to selectively provides the user withonly information relating to the processing to which the user paysattention.

[0063] In the embodiment described above, the session-informationmanagement table 205 and the session-information association table 206are created before the user operates the target log entry input unit 210to create integrated log to be displayed. However, this embodiment canalso be applied to a method in which the session-information managementtable 205 and the session-information association table 206 are createdaccording to the flowchart in FIG. 6 after the user operates the targetlog entry input unit 210.

[0064] Second Embodiment

[0065] In the first embodiment, in the processing of step 1702, thesession-information management table 205 and the session-informationassociation table 206 are created from the log information 209 that isalready recorded. In the second embodiment, the following processing isadded in place of the processing of step 1702: log information 209 isadditionally recorded on the side of the server 208 concurrently withthe creation of creating the session-information management table 205and the session-information association table 206.

[0066]FIG. 9 illustrates a configuration of this embodiment. Whenrecording a new log entry 301 in log information 209, the server 208transmits session information 302 and a log information ID, which areincluded in the log entry 301, from a session-information transmittingunit 1301 to a session-information receiving unit 1302 in the integratedlog display server 104. In addition, if related session information 401is also included in the log entry, also the related session information401 is transmitted.

[0067] The session information receiving unit 1302 adds the sessioninformation 302 and the log information ID, which have been received, tosession-information management table 205. In addition, if the relatedsession information 401 is simultaneously received, three kinds ofinformation, i.e., the session information 302, the log information ID,and the related session information 401 are added to thesession-information association table 206. As a result of the processingdescribed above, it is possible to create the session-informationmanagement table 205 and the session-information association table 206that are the same as those of the first embodiment.

[0068] The configuration and the processing are the same as those of thefirst embodiment except the above-mentioned processing of thisembodiment. Even if the related session information 401 is not recordedin log information 209 individually held by each of the plurality ofservers 208, using the system, to which the Integrated log displayingmethod described in this embodiment is applied, enables combination ofthe log information 209 into the Integrated log information 207, andalso makes it possible to selectively provides the user with onlyinformation relating to the processing to which the user pays attention.

[0069] Third Embodiment

[0070] A third embodiment is an embodiment in which if the relatedsession information 401 is not included in the first embodiment, therelation of the session information is estimated from the order of therecording date and time of log information. FIG. 10 illustrates anexample of the log information in this embodiment. As is clearlyunderstood from the comparison between the log information 1402 of theAP server 106 in FIG. 10 and the log information 109 of the AP server106 in FIG. 2, the related session information 401 is not recorded inthe log information 1402 of the AP server 106. In this embodiment,processing shown in a flowchart of FIG. 12 is performed as theprocessing of step 1702 in the first embodiment instead of theprocessing of the flowchart of FIG. 6.

[0071] Part of the processing of the flowchart in FIG. 12, which isdifferent from the processing of the flowchart in FIG. 6, will bedescribed below. After the processing which adds the session information302 to the session-information management table 205 (step 904), fourkinds of information, i.e., information about the recorded date and timeof session 303, log information ID, layer ID, and session information302, is recorded in a session-information recorded date and time table1501 shown in FIG. 11 (step 1601).

[0072]FIG. 11 illustrates an example of the session-information recordeddate and time table 1501 after the processing of the flowchart in FIG.12 ends. Two pieces of information in adjacent rows of thissession-information recorded date and time table 1501 are compared witheach other. If the information of the lower row has a layer deeper thanthat of the upper row by one level (to be more specific, if a layer IDof the lower row is larger than that of the upper row by one), it isjudged that both of session information 302 are related to each other,and therefore the session-information association table 206 is created.For example, in FIG. 11, since a layer ID of a row 1502 differs fromthat of a row 1503 by only one, it is possible to judge that Cookie 1 assession information 302 of the row 1502 and Session 1 as sessioninformation 302 of the row 1503 are related to each other.

[0073] The processing described above permits the session-informationassociation table 206 to be created. Additionally, in this embodiment,the relation between both pieces of the session information 302 isestimated using the adjacent relation in the session-informationrecorded date and time table 1501. However, even if a method forestimating the relation between both pieces of the session information302 from a statistical tendency of the adjacent relation in thesession-information recorded date and time table 1501 is applied so asto increase accuracy, this embodiment can also be applied.

[0074] The configuration and the processing are the same as those of thefirst embodiment except the above-mentioned processing of thisembodiment. Even if the related session information 401 is not recordedin log information 209 individually held by each of the plurality ofservers 208, using the system, to which the Integrated log displayingmethod described in this embodiment is applied, enables combination ofthe log information 209 into the Integrated log information 207, andalso makes it possible to selectively provides the user with onlyinformation that is estimated to be related to the processing to whichthe user pays attention.

[0075] It is also possible to store a program for executing the methodof the present invention described above in a storage medium that can beread by a computer, and then to load this program into a memory toexecute it.

[0076] As described above, according to the present invention, in acomplicated system, such as a web system, comprising two or more kindsof servers and a plurality of servers, each of which has differentfunctions, specifying, from among a plurality of log information held bythe server groups, part of log information relating to processing towhich a user pays attention permits only log information relating to thespecified processing to be collected, and also permits the collected loginformation to be integrated before providing a user with the loginformation

What is claimed is:
 1. An integrated log displaying method used in anintegration server that is connected via a network to a plurality ofprocessing servers which perform a set of processing while mutuallytransmitting and receiving information, said integration server holdinglog information as an operation history relating to the set ofprocessing, said method comprising the steps of: collecting partial loginformation associated with an identifier recorded in the loginformation from the log information held in each of the processingservers by use of the identifier, the identifier being given to eachunit of processing in the processing server; and arranging a pluralityof piece of the partial log information collected from each of theprocessing servers on the basis of order of time information and theassociation of the identifier to identify and display the partial loginformation for each of the processing servers.
 2. An integrated logdisplaying method according to claim 1, wherein said processing servertransmits the identifier to a means for creating the integrated loginformation, said means being possessed by the integration server.
 3. Anintegrated log displaying method according to claim 1, wherein theassociation between the respective identifiers included in the pluralityof pieces of log information is judged from the time-series orderrelation of the plurality of plurality of log information.
 4. Anintegrated log displaying system comprising: a plurality of processingservers for performing a set of processing while mutually transmittingand receiving information; and an integration server, connected via anetwork to the processing servers, for holding log information as anoperation history relating to a set of processing: wherein saidintegration server includes: means for collecting partial loginformation associated with an identifier recorded in the loginformation from a plurality of pieces of the log information held ineach of the processing servers by use of the identifier, the identifierbeing given to each unit of processing in the processing server; andmeans for arranging the partial log information on the basis of order oftime information and the association of the identifiers to identify anddisplay the partial log information for each of the processing server.5. An integrated log displaying system according to claim 3, whereinsaid processing server comprises a means for transmitting the identifierto a means for creating integrated log display information.
 6. Anintegrated log displaying system according to claim 3, wherein saidintegration server comprises a means for judging, from the plurality ofpieces of log information, association of the respective identifiersincluded in the plurality of pieces of log information.
 7. Acomputer-readable storage medium for storing a program for executing anintegrated log displaying method used in an integration server connectedvia a network to a plurality of processing servers, the integrationserver holding log information as an operation history relating to a setof processing, said processing servers performing the set of processingwhile mutually transmitting and receiving information, wherein saidintegrated log displaying comprising the steps of: collecting partiallog information associated with an identifier recorded in the loginformation from the log information held in each of the processingservers by use of the identifier, the identifier being given to eachunit of processing in the processing server; and arranging the pluralityof pieces of partial log information collected from each of theprocessing servers on the basis of order of time information andassociation of the identifiers to identify and display the partial loginformation for each of the processing servers.